Cybersecurity

Where it actually goes wrong at SMEs

In practice we rarely see sophisticated attacks. What we do see: an employee clicking a phishing link, an account without two-factor authentication, a server that has not been updated in two years, and a backup nobody ever tried to restore. That is where the work starts.

Getting the basics right

• Multi-factor authentication on everything reachable from the internet. By far the most effective measure.
• Patch management for Windows, Microsoft 365 and applications, structurally and demonstrably.
• Endpoint protection with ESET Cloud Protect on workplaces and servers, centrally managed and monitored by us.
• Permissions that make sense: not everyone an administrator, no open accounts from former staff.
• A backup you can restore, with a copy ransomware cannot reach.

What we work with

For endpoint protection we use ESET Cloud Protect. Management and monitoring run through Atera RMM, which we also use to deploy patches and flag anomalies. We deliberately standardise on a limited set of platforms we know thoroughly, rather than using something different at every client.

Awareness: your people are the first line

Technology catches a lot, but not everything. We help your staff recognise what gives a phishing mail away, and why an urgent payment request from the director is never handled by email.

When it goes wrong anyway

We make sure there is a plan before it is needed: who you call, what gets disconnected first, which backup is restored and in what order systems come back. An incident in the middle of the night is not the moment to work that out.

Insurance and client requirements

Insurers and clients increasingly set requirements for your security. We help you answer those questionnaires honestly, and make sure the answer is actually true.